This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/QJyyww7mvmuNgglQHmpmCeMGxz4.roa File: QJyyww7mvmuNgglQHmpmCeMGxz4.roa (raw, json) Hash identifier: yiY364QLLA+6wR40A7GB9E7/XhNa8QD38/yYsdgvW4I= Subject key identifier: 40:9C:B2:C3:0E:E6:BE:6B:8D:82:09:50:1E:6A:66:09:E3:06:C7:3E Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F15164A40328322FE01738EE27B821A Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/QJyyww7mvmuNgglQHmpmCeMGxz4.roa Signing time: Fri 02 Jan 2026 14:20:46 +0000 ROA not before: Fri 02 Jan 2026 14:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213465 IP address blocks: 2a14:c380:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:16:4a:40:32:83:22:fe:01:73:8e:e2:7b:82:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=409cb2c30ee6be6b8d8209501e6a6609e306c73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:30:37:3d:22:7d:96:c1:38:26:45:39:10:a3: 11:69:55:95:e6:53:3c:f6:10:4d:82:2f:84:5b:26: 49:2e:42:46:0f:e3:ce:86:95:8c:d7:9c:32:dc:28: a5:f1:01:23:ad:cf:9d:65:91:a5:3c:dd:3c:c8:e7: 25:8d:87:57:41:c5:06:6e:17:8c:03:5f:a8:39:43: ed:bd:7e:f8:7a:a5:ae:f5:5d:bb:27:7e:96:c5:fe: 07:56:db:fe:13:9e:46:e2:a5:34:60:8b:c7:90:ba: d9:07:3d:6c:80:a8:54:38:cd:94:e3:2a:80:ba:6f: 3a:c7:f5:c5:84:8c:ee:37:08:98:43:16:d9:8a:9b: 2a:51:b0:0e:0a:4f:16:43:7f:9a:f7:ff:e9:8f:4b: fe:3a:80:16:d2:e9:82:a2:64:b7:f5:4b:68:10:02: c5:e2:6f:8c:52:c6:69:a3:61:28:32:41:e4:2d:93: f0:dc:36:37:f3:c1:09:4a:77:5f:83:ca:f9:12:9b: 67:7f:be:78:50:ae:30:42:c9:f1:9f:0a:60:99:64: d5:31:06:c5:62:19:16:88:25:f5:b3:66:44:73:37: 57:44:69:54:87:e8:ea:43:e0:fe:12:68:a6:86:a0: 4c:57:47:f3:d2:a4:78:56:34:61:1b:16:89:30:2d: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:B2:C3:0E:E6:BE:6B:8D:82:09:50:1E:6A:66:09:E3:06:C7:3E X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/QJyyww7mvmuNgglQHmpmCeMGxz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:10::/48 Signature Algorithm: sha256WithRSAEncryption 5d:6b:88:9e:0d:19:28:83:15:08:77:dc:65:6a:63:95:15:da: a1:0f:17:02:4a:5c:d8:b3:97:d2:63:ea:08:ce:fd:79:89:d7: d9:6b:5c:98:d8:f3:b1:46:98:9e:d3:f5:7b:f0:8f:41:9b:43: cc:01:1d:84:06:4e:e6:22:ee:66:66:2c:f6:20:63:41:52:66: 4a:69:77:ee:0e:fc:25:20:5a:1a:de:95:53:b5:4d:41:5e:91: 54:9d:85:ca:d6:ba:97:8b:2f:01:e7:21:20:74:81:ea:00:fa: 9e:c4:f1:e6:8c:62:38:86:f6:70:51:6e:fc:7e:58:35:f2:83: 92:38:ca:12:56:10:58:df:95:0c:b3:69:c1:30:db:76:c5:1a: c6:08:93:92:04:73:57:c7:16:ee:11:15:a3:2c:49:88:85:62: b4:c8:d7:99:70:80:a7:ef:2b:cf:6a:84:97:54:1b:d9:20:f7: e3:0e:b0:44:3a:ff:4a:02:94:8b:22:8d:5b:03:00:b3:d7:e1: 74:1a:38:84:63:47:5f:5b:3b:76:33:53:3a:cf:31:2b:48:9e: ec:2d:10:c8:14:79:ef:be:5a:4c:af:66:3c:b7:78:7f:37:a5: 1e:5b:7d:31:13:e9:f7:f7:6d:17:5d:38:d0:be:66:d3:54:1f: 38:8e:a9:a1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FRZKQDKDIv4Bc47ie4IaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDljYjJjMzBlZTZiZTZiOGQ4MjA5NTAxZTZhNjYwOWUzMDZjNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jA3PSJ9lsE4JkU5EKMRaVWV5lM8 9hBNgi+EWyZJLkJGD+POhpWM15wy3Cil8QEjrc+dZZGlPN08yOcljYdXQcUGbheM A1+oOUPtvX74eqWu9V27J36Wxf4HVtv+E55G4qU0YIvHkLrZBz1sgKhUOM2U4yqA um86x/XFhIzuNwiYQxbZipsqUbAOCk8WQ3+a9//pj0v+OoAW0umComS39UtoEALF 4m+MUsZpo2EoMkHkLZPw3DY388EJSndfg8r5Eptnf754UK4wQsnxnwpgmWTVMQbF YhkWiCX1s2ZEczdXRGlUh+jqQ+D+EmimhqBMV0fz0qR4VjRhGxaJMC01JQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFECcssMO5r5rjYIJUB5qZgnjBsc+MB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvUUp5eXd3N212bXVOZ2dsUUhtcG1DZU1HeHo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTDgAAQ MA0GCSqGSIb3DQEBCwUAA4IBAQBda4ieDRkogxUId9xlamOVFdqhDxcCSlzYs5fS Y+oIzv15idfZa1yY2POxRpie0/V78I9Bm0PMAR2EBk7mIu5mZiz2IGNBUmZKaXfu DvwlIFoa3pVTtU1BXpFUnYXK1rqXiy8B5yEgdIHqAPqexPHmjGI4hvZwUW78flg1 8oOSOMoSVhBY35UMs2nBMNt2xRrGCJOSBHNXxxbuERWjLEmIhWK0yNeZcICn7yvP aoSXVBvZIPfjDrBEOv9KApSLIo1bAwCz1+F0GjiEY0dfWzt2M1M6zzErSJ7sLRDI FHnvvlpMr2Y8t3h/N6UeW30xE+n3920XXTjQvmbTVB84jqmh -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:39 2026 by rpki-client